spring-integration-scripting
Spring Integration Scripting Support
87%
Total Score
healthy
Healthy: active maintenance, broad contribution, and strong project backing outweigh the prerelease status and workflow pinning gaps.
Health Score Breakdown
This release is a milestone prerelease, so compatibility may still change even though it is on a stable major line; the recent prerelease share is 30%.
All 21 workflows were analyzed with no untrusted checkouts or script-injection findings. However, 16 of 25 action references are unpinned, and high-confidence template-injection findings are hygiene concerns even without a dangerous trigger; one workflow also has top-level write permissions.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-230332 spring-integration-scripting is vulnerable to Race Condition in versions 0.0.1 - 7.0.5 and 7.1.0 - 7.1.0. | 0.0.1 - 7.0.57.1.0 - 7.1.0 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework.integration:spring-integration-core Version 7.2.0-M2 | — | — |
org.jetbrains.kotlin:kotlin-scripting-jsr223 Version 2.4.20 | — | — |
org.graalvm.sdk:graal-sdk Version 25.0.4.1.1 | — | — |
org.graalvm.polyglot:js Version 25.0.4.1.1 | — | — |
org.graalvm.polyglot:python Version 25.0.4.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 20 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.